Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2021-31822: When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the sy...
CVE-2021-31822 · published 4 years ago
Summary
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
What to do
- Update octopus tentacle to version 6.1.1116 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| octopus | tentacle |
>= 3.15.4, < 6.1.1116 cpe:2.3:a:octopus:tentacle:*:*:*:*:*:*:*:* |
Original advisory text
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the sy...
When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-276Incorrect Default Permissions
Timeline
Published24 Nov 2021
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2021-31822 · NVD
Track software like this
Free during beta